201d1e0492232be2f34bf699a08e516bd4d433a1071291f673a15b846216a7ce

Resubmissions

30-08-2023 14:03

230830-rc5mmsfg85 10

24-08-2023 14:38

230824-rzwcgsdb55 10

Analysis

max time kernel
1187133s
max time network
87s
platform
android_x86
resource
android-x86-arm-20230824-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20230824-enlocale:en-usos:android-9-x86system
submitted
30-08-2023 14:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

liveWallpaperPlugin.apk
Size

162KB
MD5

91d33062e74043bb0bd9d5f66b343f3e
SHA1

aa3fab31cf6d5bc7fb1c012ada2b77ffe242a7c0
SHA256

4c3720917d9920cdec450cc85fe2fe3db39bc48cff4fea270914b475fc79f08a
SHA512

be5eb5cdab9e3348f3228fee40172b351a07d2d39ddd9d085593e3d78c13259be62425b4993a40696542902c452f7213a7b92410baf06192051640607389b80c
SSDEEP

3072:QV8ZyGg6GYtzqWn1Vmkv7YVQi5cRVl/51SGHHkmjVw:w8ZLGYtrv7O09bSGHHkYw

Score

5^/10

ransomware

Malware Config

Signatures

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.tencent.qqlive.wallpaper

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.tencent.qqlive.wallpaper

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.tencent.qqlive.wallpaper

com.tencent.qqlive.wallpaper
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4187

/system/bin/sh -c getprop
2⤵
PID:4220

getprop
2⤵
PID:4220

/system/bin/sh -c type su
2⤵
PID:4278

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.tencent.qqlive.wallpaper/app_crashrecord/1004
Filesize
235B

MD5
e086ebd3c43686175d7f4ed3490d1f10

SHA1
2d571a58ab9394669a09bc5b2213f22b7b2339ee

SHA256
5b85c147962cea7782ed1796f7e17a3d81dfc45e09218688aea1023bbe3b990b

SHA512
f0d5243b747db6cd650a0d709a04293c7769ac17929b0bec9c36b7be2120a36f176e7dabd6ff9fd49dac4aea201696c3369138022fe4efbef2468a7343ecdd6a

Download Submit
/data/data/com.tencent.qqlive.wallpaper/app_crashrecord/1004
Filesize
58B

MD5
0d210bfb2a0e1f1b4c082a6a0f79de07

SHA1
bb8ed9e364db79d1d9f2fcde3f15091893222faa

SHA256
988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

SHA512
536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

Download Submit
/data/data/com.tencent.qqlive.wallpaper/databases/bugly_db_
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.tencent.qqlive.wallpaper/databases/bugly_db_-journal
Filesize
512B

MD5
fbd0922befb7825460a92efc45193920

SHA1
956990c0894580d13bb86c469174976be4a39c61

SHA256
3703207e9ad881a52575d90655632c77a34fb82a83d0b9726eddab811933aa71

SHA512
20eaae16365beba713c1fa97077a7b0ff1c8cd3244d6a6413aac51a65ceaaf4af99834bad0cd47b041214b61baf3e144fad9920db78d9f33fb950de484b8503f

Download Submit
/data/data/com.tencent.qqlive.wallpaper/databases/bugly_db_-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.tencent.qqlive.wallpaper/databases/bugly_db_-wal
Filesize
100KB

MD5
6655c301aaca1fbc8484742c1b9fc0cd

SHA1
b94d15f6a45f90d09c12c5c87273043cdfd1ead0

SHA256
8ff7ac2739eb725243b32ec135873cd0ee053ade45abb11fd00708ba132bd478

SHA512
f25419fae318465940caaceb8c29ab758ab12c5dedc9013cce4fcfeddfee221025a4797d815143946820408774ab23008a4687fd7f80bb92d03a64f89e70f82c

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads